基于Web的电子政务安全防范  

Security Protection of E-Government System based on Web

作　　者：谷宁静 

机构地区：[1]上海市人力资源和社会保障信息中心

出　　处：《信息安全与通信保密》2012年第9期120-123,126,共5页Information Security and Communications Privacy

摘　　要：中国很多地区的电子政务系统存在各种各样的安全隐患,通过对某些地区的近百个电子政务系统的安全现状进行分析,文中从主机、应用程序、数据库3个层面的安全隐患问题提出相应的解决方法和策略。通过借鉴文中提出的针对防范常用攻击方法的代码层实现等方法,可以节省对系统的安全测评和整改所需的大量人力、物力和财力,对中国电子政务系统的安全性能有极大的提高,极大地保障了电子政务系统运作的可靠性和工作效率。Various security threats exist in the e-government systems in many areas of China. Based on the security situation of e-government systems deployed in certain areas of China, several critical security threats against e-government system are identified, and thus some effective solutions are proposed to address the identified threats from the three aspects of host application and database. These methods could help system operators enormously enhance the security, reliability, and efficiency of current e-government systems, and at the same time, reduce the financial and labor expenses in security evaluation and rectification.

关 键 词：电子政务 SQL注入 跨站脚本攻击 跨站点伪造请求 数据容灾 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]